Bug#1149044: trixie-pu: package libnet-cidr-set-perl/0.15-1+deb13u2

[Roland Rosenfeld]

Package: release.debian.org
Severity: normal
Tags: trixie
X-Debbugs-Cc: libnet-cidr-set-perl at packages.debian.org
Control: affects -1 + src:libnet-cidr-set-perl
User: release.debian.org at packages.debian.org
Usertags: pu

[ Reason ]
This fixes CVE-2026-19566, a minor input sanitizing fix.  It's a
followup to CVE-2026-49942, which was not complete.

[ Impact ]
Depending on the usage of the library this may be a security issue.

[ Tests ]
salsa-ci passed execpt test-uscan (which isn't a problem for a
trixie-pu).  See
https://salsa.debian.org/perl-team/modules/packages/libnet-cidr-set-perl/-/pipelines/1177382
The patches ships its own test cases, which succeed.

[ Risks ]
Hopefully none...

[ Checklist ]
  [x] *all* changes are documented in the d/changelog
  [x] I reviewed all changes and I approve them
  [x] attach debdiff against the package in stable
  [x] the issue is verified as fixed in unstable

[ Changes ]
Minimal fix for CVE-2026-19566 including a new test case.

[ Other info ]
According to
https://security-tracker.debian.org/tracker/CVE-2026-19566 this is a
minor issue, so it's not for DSA but for a point release.

Greetings
Roland
-------------- next part --------------
A non-text attachment was scrubbed...
Name: libnet-cidr-set-perl_0.15-1+deb13u2.diff
Type: text/x-diff
Size: 2438 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-perl-maintainers/attachments/20260926/6e74e432/attachment.diff>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-perl-maintainers/attachments/20260926/6e74e432/attachment.sig>